CVE-2026-2628 | All-in-One Microsoft 365 & Entra ID and Azure AD SSO Login Plugin improper authentication

A vulnerability, which was classified as critical, has been found in All-in-One Microsoft 365 & Entra ID and Azure AD SSO Login Plugin up to 2.2.5 on WordPress. Affected is an unknown function. This manipulation causes improper authentication.

This vulnerability is handled as CVE-2026-2628. The attack can be initiated remotely. There is not any exploit available.